Whenever you try to order food or add a new credit card to your account, you might be prompted to authenticate the transaction with your bank via a pop-up screen. This protocol is part of Strong Customer Authentication, a new regulation for the European Economic Area requesting banks to authenticate digital transactions. This authentication protocol adds an extra layer of security to all your online transactions.

What is Strong Customer Authentication?

Strong Customer Authentication (SCA) is a European and UK regulatory requirement to decrease fraud and secure online payments. Although the regulatory requirements are applicable to banks that issue credit cards, Uber had to build additional authentication into our checkout flow to complete transactions once Strong Customer Authentication went into effect.

SCA demands extra authentication protocol upon digital transaction with at least one of the following authentication types:

• Something the customer knows (example: given PIN code or password)
• Something the customer has (example: text sent to phone or hardware token)
• Something the customer is (example: fingerprint or face recognition)

Banks will include some type of extra authentication (like the ones above) to most digital transactions in order to comply with SCA. The extra authentication is set up, controlled and approved by your Bank, not by Uber.

Banks will decline transactions that fail to be authenticated. If you would like to inform yourself about Strong Customer Authentication regulations and requirements, they are set out in the European Banking Authority and European Commission.

SCA—and the authentication protocol that comes with it—is subject to all transactions made with payment methods issued in the European Economic Area (EEA), and transactions made with them in and outside the EEA.

如何驗證交易？

最常見的網上交易驗證方式是在結賬時進行額外步驟：持卡人會收到銀行的提示，要求他們提供額外資料以完成交易 (如指定密碼、短訊代碼或指紋確認)。

每次訂餐都需要進行驗證嗎？

這視乎交易金額/頻率和你銀行的驗證政策而定。 一般而言，你每次新增或更新信用卡付款方式時都需要進行驗證。

為什麼需要驗證交易？

驗證交易 (如適用) 可減少欺詐或其他類型的濫用風險。每次進行數碼交易時，銀行都可能要求你進行驗證以確認資格。並非所有交易都需要進行驗證。如需進一步了解什麼時候才需要進行額外驗證，請向你的銀行查詢。

如何確保驗證過程安全？

安全驗證程序會由你的銀行負責進行並提供保障。驗證過程和驗證類型 (短訊或指紋等) 並非由 Uber 決定或負責，因此，若你有任何疑問，請直接聯絡你的銀行。

我的 Uber 帳戶已經設定了雙重驗證，為什麼還需要強效顧客驗證？

啟用雙重驗證後，你每次登入 Uber 帳戶時，都需要完成兩項保安要求。

強效顧客驗證是一項強制驗證協定，旨在為你的數碼交易提供額外保障。

每次結清待繳金額時是否都需要進行驗證？

是，每次進行新的數碼交易時，系統都可能會要求你進行驗證。

強效顧客驗證的豁免情況

在這項規定下，部分低風險的付款交易可獲豁免，無需進行強效顧客驗證。進行交易時，你的銀行將會評估交易的風險級別，並保留最終決定權利，決定是否批准豁免或需進行驗證。

其他數碼付款方式 (如 PayPal、Apple Pay 或 Google Pay 數碼銀包) 則不受強效顧客驗證協議約束。